Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
File: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft (raw, json)
Hash identifier: ZFjTNCQWLHT2JbfXgU3F+hgsAnesqBoc9vmzcsCe26E=
Subject key identifier: A6:C3:E6:BC:3F:6F:29:88:80:18:ED:76:C9:91:34:34:A2:3C:F5:16
Authority key identifier: 5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
Certificate issuer: /CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Certificate serial: 0199FC582AEB1E48C8317F59DF3174BD3AC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 12:01:00 +0000
Manifest this update: Sun 19 Oct 2025 12:01:00 +0000
Manifest next update: Mon 20 Oct 2025 12:01:00 +0000
Files and hashes: 1: D7wvDXUsXUNReHXB-ElMhZdvj4w.roa (hash: YElp4tNhBybnsgMrPzJJrWGgoM31szDQK/CjgNi5G0I=)
2: W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl (hash: EANMIbdikvC0vF3Zqg+XKM1YzkaFAXFNJyKTX8k8L3Q=)
3: fV4CO55wgQW9hfh18y1_D2jQQS0.roa (hash: zkhm9MY22kTd2LgUoPIq1ls+LADDlKBeCuVAbz9l9VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2a:eb:1e:48:c8:31:7f:59:df:31:74:bd:3a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5baa35401e5297b3b527e84f93ea8aa110d97b95
Validity
Not Before: Oct 19 12:01:00 2025 GMT
Not After : Oct 20 12:01:00 2025 GMT
Subject: CN=a6c3e6bc3f6f29888018ed76c9913434a23cf516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:2c:b8:50:ea:4f:25:82:dc:9b:c6:ca:3c:
28:2e:63:89:ab:1a:4d:9b:a8:bc:b4:d4:15:6e:0e:
67:3a:1a:f2:58:93:7f:c8:b8:9a:50:97:1d:14:60:
76:7c:f6:c7:59:d7:a8:07:c7:20:8d:f7:c6:32:e5:
8f:16:69:7a:22:fc:dd:8d:01:4e:8f:a0:89:2a:96:
26:8a:4e:ed:37:c6:98:82:ca:df:0d:7c:bc:41:61:
18:86:3e:d9:a9:23:43:d8:aa:19:97:48:dd:ba:a6:
cb:92:0b:bf:51:69:92:7d:1b:92:50:e4:f5:b4:cd:
7f:91:5d:f2:89:64:2d:5a:5a:53:23:5e:e8:87:e2:
25:b3:fa:8b:4a:0a:ca:31:d5:56:e9:0e:ea:ab:a0:
92:f5:95:2c:5f:b9:6f:96:dc:68:0a:8c:62:9b:de:
e3:1b:07:4c:47:55:22:e3:04:39:5e:44:37:f5:92:
60:f7:a7:b5:3b:6b:a1:dc:8d:c4:1f:7a:42:f7:92:
64:62:f2:d2:9a:c0:0a:8f:9f:3f:6f:de:09:f9:c3:
08:e1:37:41:35:44:4d:fd:aa:a8:55:29:27:35:fd:
cc:6b:b3:a3:cc:ee:c7:f3:da:9d:19:f3:4a:91:ff:
7d:14:e7:44:30:0e:68:b9:e0:e7:75:8c:7b:d9:04:
13:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C3:E6:BC:3F:6F:29:88:80:18:ED:76:C9:91:34:34:A2:3C:F5:16
X509v3 Authority Key Identifier:
keyid:5B:AA:35:40:1E:52:97:B3:B5:27:E8:4F:93:EA:8A:A1:10:D9:7B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a1dcfb-8010-414e-9e3a-44001700b8ca/1/W6o1QB5Sl7O1J-hPk-qKoRDZe5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:0f:c9:f2:2f:71:fd:07:4b:f9:80:cc:69:5d:6e:b7:18:8c:
4b:55:a5:9d:c9:a3:84:4c:70:80:97:b5:3e:13:e4:a1:88:98:
28:af:59:ee:7b:76:3f:f4:6a:b4:a9:6a:45:0a:e5:f5:b9:90:
cc:f2:e5:99:f9:b4:fc:ab:05:e6:86:11:63:63:fe:b0:64:2b:
97:2a:11:d5:f9:e0:45:27:46:52:56:e7:44:b9:40:a9:cb:22:
b4:3c:1c:38:2a:d9:12:73:e0:cb:e7:ac:00:8c:bc:17:a1:71:
29:64:99:03:81:58:f6:a4:03:a5:32:1c:ce:79:e8:d6:e0:2c:
f0:51:85:67:2b:15:d3:a2:2c:ca:a3:3d:f0:83:c5:f8:9f:79:
b9:91:ab:c6:4d:31:b8:b3:fa:4c:01:dc:bf:5b:03:e8:d8:8e:
03:07:ba:1c:1f:2c:4c:f7:fc:27:18:b7:8c:ba:c9:c8:2a:36:
04:41:b8:2c:d7:f0:7f:9d:0f:cf:e7:dd:08:0c:97:1a:86:e7:
c1:08:a5:32:19:07:a9:9d:56:85:53:e1:62:e6:9e:7a:e5:4c:
6f:bb:c3:5b:ee:42:b9:74:3f:98:4a:7e:26:9e:c6:3a:5b:5b:
f2:a7:6e:2b:ea:40:01:9b:c7:c6:fd:91:8c:58:c7:f5:95:d4:
28:8f:ac:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:31 2025 by rpki-client